Re: Properly Specifying RBL in main.cf

2009-01-15 Thread J Sloan
Rich Shepard wrote: > > Ah, so! That explains it. I run Dan Bernstein's dnscache here, but > use my > ISP's DNS servers otherwise. > > So, now I need to consider whether to remove the spamhaus line from > main.cf or set up and maintain my own dns server. > I find that having a local unix-based

Re: Properly Specifying RBL in main.cf

2009-01-15 Thread J Sloan
Rich Shepard wrote: > On Thu, 15 Jan 2009, J Sloan wrote: > >> I find that having a local unix-based dns server is often orders of >> magnitude faster than relying on an upstream isp for dns resolution. > > Joe, > > I don't know that the effort to set up and m

Re: gmail relay and certificates on Fedora 10

2009-02-04 Thread J Sloan
Sounds like fedora's missing a ca-bundle.crt... Joe sean darcy wrote: > I followed the instructions on > http://www.wormly.com/blog/2008/11/05/relay-gmail-google-smtp-postfix/ > to create your own certificate to use with google. > > main.cf: > .. > ## this to use certificate I created: >

weird postfix TLS behaviour

2009-02-25 Thread J Sloan
We're seeing an odd problem with postfix TLS only when talking to an ironport device. We configured smtp_tls_security_level = none and used smtp_tls_policy_maps to set per site tls policy, rather than doing tls by default. This had worked perfectly for over months and many thousands of smtp sessio

Re: weird postfix TLS behaviour

2009-02-25 Thread J Sloan
Victor Duchovni wrote: > On Wed, Feb 25, 2009 at 04:50:49PM -0800, J Sloan wrote: > > >> We have just started doing business with a firm that uses an ironport >> device, and discovered that postfix will not issue a STARTTLS to that >> host, whether it's lis

Re: weird postfix TLS behaviour (solved)

2009-02-25 Thread J Sloan
Victor Duchovni wrote: > >>> The policy table lookup key does not match the destination nexthop, or >>> > > > > That's exactly the problem. > > > I think you should be able to figure this out, even without reading the > below, but if you are in a hurry try the documentation: > > ht

Re: Performance tuning

2009-03-20 Thread J Sloan
For what it's worth, we've found ext3 to be far too slow for our needs. The best setup we've found is reiserfs, mounted with "noatime" and "notail" options - Joe Brandon Hilkert wrote: > - Original Message - From: "Ralf Hildebrandt" > > To: > Sent: Friday, March 20, 2009 6:52 AM > Subje

Re: my mailserver has been blacklisted

2009-03-26 Thread J Sloan
Charles Marcus wrote: > On 3/26/2009, Jim Wright (j...@wrightthisway.com) wrote: > >> Two options. 1, Eliminate windows users from your network. >> > > Please... such comments are worse than useless... > > It may not be what you want to hear, especially if you're heavily invested in mi

Re: Newbie configuration/installation question

2009-04-13 Thread J Sloan
Tashfeen Ekram wrote: > I have installed Postfix on Ubuntu to use to only send emails for my > rails application. My rails application is not able to connect to it. > Could this be because sendmail is listeneing at port 20? > also, what configuration would suit me best if I only want to send > emai

Re: Proxying a policy service

2009-05-13 Thread J Sloan
Adrian Overbury wrote: > Has anyone ever written a proxy server for policy services? I have a > policy server (grossd, one of the best greylisting engines I've ever > used) that, if it goes down, causes my Postfix servers to temp fail > everything with 'Server configuration problem'. This is a re

Re: Proxying a policy service

2009-05-13 Thread J Sloan
Wietse Venema wrote: > J Sloan: > >> Adrian Overbury wrote: >> >>> Has anyone ever written a proxy server for policy services? I have a >>> policy server (grossd, one of the best greylisting engines I've ever >>> used) that, if it

Re: Proxying a policy service

2009-05-13 Thread J Sloan
Sahil Tandon wrote: > > Google 'hapolicy synopsis' -- the author of postfwd wrote a perl > script which acts as a load balancing policy service that can return > dunno if the underlying services are unreachable. Obviously, if > hapolicy itself malfunctions, you're back at square one. Looks intere

Re: Proxying a policy service

2009-05-14 Thread J Sloan
Geert Hendrickx wrote: > > What drawbacks did you experience? We run a local policyd instance on each > postfix server too, all connecting to a central (not replicated) MySQL. > Policyd's behaviour when MySQL becomes unavailable is configurable, it can > either tempfail (4xx) all incoming e-mail o

Re: Postfix-2.6.0 RPM

2009-05-14 Thread J Sloan
Roderick A. Anderson wrote: > > Sorry to hear that but in the mean time you can grab .src.rpm for a > prior release, the tarball for the current release and modify the > .spec file to reflect this. I've been doing this for our smtp servers for some time. The suse factory postfix srpm compiles nicel

Re: Proxying a policy service

2009-05-14 Thread J Sloan
Geert Hendrickx wrote: > On Thu, May 14, 2009 at 10:15:07AM -0700, J Sloan wrote: > >> Yes, that is the benefit of doing it that way. But we experienced problems >> with recurring corruption of the isam tables when the network connections >> to the db server were interr

Re: Proxying a policy service

2009-05-18 Thread J Sloan
Jan P. Kessler wrote: > > hapolicy (http://postfwd.org/DEVEL/tools/hapolicy-0.99.1) was developed > to be small (~200 lines perl), simple and reliable. therefore it uses > only basic perl modules and relies on postfix spawn. we run it since > more than 6 months without problems to have a shared gre

Re: Should I upgrade from 2.3.X?

2009-06-10 Thread J Sloan
Michael Wang wrote: > Wietse Venema wrote: >> Michael Wang: > [...snip...] >>> Is 2.3 end-of-life coming any time soon? >> >> Updates for Postfix 2.2 stopped last year. > > So that sounds like 2.3 patches may end this year. Assuming that, I > have (very) roughly 6 months + some unknown amount of t

Re: How Can I Tell How Postfix Was Installed?

2008-08-20 Thread J Sloan
Blake Carver wrote: > So a few other details I've grabbed didn't provide yesterday- > These numbers don't seem to add up. > My big question is how do I get this system upgraded without breaking it? > > postconf -d | grep mail_version > mail_version = 2.4.5 > > and also > > rpm -qa | grep postfix >

Re: New Postfix install

2008-10-01 Thread J Sloan
Perhaps you want mailx - Joe Ujjval K wrote: > Hi, > > Thx for the reply..I have the "mail" Program, but it tries to > use/usr/sbin/sendmail to send the email... > Can that be configured to use postfix? > > thx > > --- On Thu, 10/2/08, Noel Jones <[EMAIL PROTECTED]> wrote: > > >> From: Noel

Re: Finally blocking some spam

2008-10-13 Thread J Sloan
mouss wrote: > Joey a écrit : > >> One thing I didn't think of on this, is that the list from spamhaus will be >> the same I am already rejecting via RBL and while it is local, it would >> still not include all the IP's I am using from these other heavy spam >> countries. >> > > > you can b

Re: Finally blocking some spam

2008-10-13 Thread J Sloan
Daniel V. Reinhardt wrote: > > > Just to make sure I'm not crazy here, you can't get access to > http://www.okean.com ? > > Links to screenshots of what I see ( right now ) > http://web56.net/images/download/screenshot1.jpg > http://web56.net/images/download/screenshot2.jpg > That's interesting. I

Re: SOLVED: SMTP transaction interrupted

2008-11-04 Thread J Sloan
Wietse Venema wrote: > Wietse Venema: > >> I don't know if this is a problem with Windows TCP/IP, or if this >> is a problem with a firewall on the client side. Reportedly, some >> firewalls randomize TCP sequence numbers but don't update the >> sequence numbers in SACK fields. That would be a

Re: SuSE repository - old postfix ?

2008-12-08 Thread J Sloan
Alexander Grüner wrote: > > Open SUSE includes more recent posfix rpms (but in the "factory" not > the repos): > http://download.opensuse.org/factory/repo/oss/suse/x86_64/postfix-2.5.5-6.6.x86_64.rpm > > > > http://download.opensuse.org/factory/repo/oss/suse/i586/postfix-2.5.5-6.5.i586.rpm > > > >

Re: Stopping backscatter with before-queue

2008-12-08 Thread J Sloan
Chris Turan wrote: > > Ouch, but you're right. I am creating my own misery. It wasn't a > problem before when I was unknown to the spammers. Its only been a > problem for a few weeks and I haven't yet been put on any blacklists. Keep sending out backscatter spam, and you will most certainly end

Re: Canonical Rewriting

2008-12-12 Thread J Sloan
Ville Walveranta wrote: > Somewhat unrelated, but perhaps worth mentioning: > > For couple of years I've used RegexBuddy (http://www.regexbuddy.com) Weird, no linux version? oh well, useless to me. Joe

Re: Canonical Rewriting

2008-12-12 Thread J Sloan
Sturgis, Grant wrote: > I know, way OT, but has to be said: > > You think a linux bigot would use such a thing? > No need for name calling on this list. That sort of nonsense, if you've simply got to say it, should have been said via pm. Joe